root and capabilities list

[ds]

On 14.10.2014 22:23, Martin Pitt wrote:
> You also need root to initially get those CAP_*, so this is not a real 
> limitation. 
Yes it is. the capability is set on exe file by the installer. The exe 
itself should never acquire root ideally. Only has the limited subset of 
root powers CAP_SYS_RAWIO and CAP_SYS_MODULE